IF you run a syslog server, this would be easy to diagnose. There are plenty of free syslog servers out there. I use Kiwi's free syslog server all the time.
To enable Syslogging:
LOGGING ENABLE
LOGGING HOST INSIDE
LOGGING TRAP NOTIFICATIONS
This log will give you oodles of info on the traffic, including anything that's blocked and what blocked it.